Overview

overview

10

Static

static

10

1688-67-0x...ry.exe

windows7-x64

1

1688-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1688-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    6c7b6b71b8cf4eb6c0241dc23280dc28

  • SHA1

    eb5ce3526590ee99d7ed6bece249bde2ea667f47

  • SHA256

    12f6102d27c9eddb644a68c3ec339904d964ffb98fda44c6f61698015850ebaf

  • SHA512

    2f31682293f7d332a7e6a07fd5291c3ac389130b2c8cc294de44bb0a5cc84af8ff59fd9497c04bb335ac2525639084f0f01a4cc04cdec60a5ab3befd4d44025d

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqCIzmd:nSHIG6mQwGmfOQd8YhY0/ETUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/davidhill/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1688-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections